Medium · published March 23, 2021
A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible code execution by triggering a use-after-free. The highest threat from this vulnerability is to system availability.
| Product | Versions | Fixed in |
|---|---|---|
| sqlite/sqlite | ≥ 3.33.0, < 3.34.1 | 3.34.1 |
| oracle/communications_network_charging_and_control | ≥ 12.0.1.0, ≤ 12.0.4.0.0 | — |
| oracle/communications_network_charging_and_control | all versions | — |
| oracle/enterprise_manager_for_oracle_database | all versions | — |
| oracle/jd_edwards_enterpriseone_tools | < 9.2.6.0 | 9.2.6.0 |
| oracle/mysql_workbench | ≤ 8.0.26 | — |
| oracle/outside_in_technology | all versions | — |
| oracle/zfs_storage_appliance_kit | all versions | — |